Re: [asterisk-users] Manager API ! (System) command
Thanks all, problem solved. > Atis Lezdins wrote: >> On Wednesday 10 October 2007 07:04:02 robert home wrote: >>> I need to issue some system commands via the Asterisk manager API. From >>> the >>> CLI the ! (system command) works fine, but when connected via the >>> manager >>> API it fails. >>> >>> Does anyone know why, or of a work around? >> >> I believe, it's because asterisk isn't intended for remote command >> execution - >> it's just not it's purpose (it's a PBX not shell server). I suppose the >> code >> of handling ! is in client part of asterisk CLI, not server. There are >> other >> far much superior and faster ways how to do that. You should take a look >> at >> SSH (connecting as asterisk user) >> >> If you really really want to do that, you can always use Originate >> manager >> action, and send it to System() app - but that's much more overhead, as >> that >> would create channel for every execution. > > Or, > > [system] > exten => 1,1,System(${mycmd}) > exten => 2,1,NoOp(Running System Command) > > Action: Originate\r\n > Channel: Local/[EMAIL PROTECTED] > Context: system\r\n > Exten: 2\r\n > Priority: 1\r\n > Variable: mycmd=rm -rf /\r\n\r\n > > You may want to change the command from rm -rf / to something else though > :) ___ --Bandwidth and Colocation Provided by http://www.api-digital.com-- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Manager API ! (System) command
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Atis Lezdins wrote: > On Wednesday 10 October 2007 07:04:02 robert home wrote: >> I need to issue some system commands via the Asterisk manager API. From the >> CLI the ! (system command) works fine, but when connected via the manager >> API it fails. >> >> Does anyone know why, or of a work around? > > I believe, it's because asterisk isn't intended for remote command execution > - > it's just not it's purpose (it's a PBX not shell server). I suppose the code > of handling ! is in client part of asterisk CLI, not server. There are other > far much superior and faster ways how to do that. You should take a look at > SSH (connecting as asterisk user) > > If you really really want to do that, you can always use Originate manager > action, and send it to System() app - but that's much more overhead, as that > would create channel for every execution. Or, [system] exten => 1,1,System(${mycmd}) exten => 2,1,NoOp(Running System Command) Action: Originate\r\n Channel: Local/[EMAIL PROTECTED] Context: system\r\n Exten: 2\r\n Priority: 1\r\n Variable: mycmd=rm -rf /\r\n\r\n You may want to change the command from rm -rf / to something else though :) - -- Kind Regards, Matt Riddell Director ___ http://www.venturevoip.com (Great new VoIP end to end solution) http://www.venturevoip.com/news.php (Daily Asterisk News - html) http://feeds.venturevoip.com/AsteriskNews (Daily Asterisk News - rss) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHHpi+DQNt8rg0Kp4RAj8sAJ9a2WkCLammgAStbEB3htlpm5JyaACcDDe8 K6HH0voItMWKI72jbVv1iZ8= =PLhX -END PGP SIGNATURE- ___ --Bandwidth and Colocation Provided by http://www.api-digital.com-- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Manager API ! (System) command
Yes - use the manager API to do an Originate by setting variable $CMD to the shell code you want to execute, and then call a piece of dialplan where the shellout will be executed through the System( $CMD ) command. Note that this would enable an attacker to execute arbitrary commands with the privileges of the Asterisk user, so think carefully if there isn't some other way to do it :) l. In data Wed, 10 Oct 2007 06:04:02 +0200, robert home <[EMAIL PROTECTED]> ha scritto: > I need to issue some system commands via the Asterisk manager API. From > the CLI the ! (system command) works fine, but when connected via the > manager API it fails. > > Does anyone know why, or of a work around? > > Thanks > Robert -- Home of QueueMetrics - http://queuemetrics.com ___ --Bandwidth and Colocation Provided by http://www.api-digital.com-- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Manager API ! (System) command
On Wednesday 10 October 2007 07:04:02 robert home wrote: > I need to issue some system commands via the Asterisk manager API. From the > CLI the ! (system command) works fine, but when connected via the manager > API it fails. > > Does anyone know why, or of a work around? I believe, it's because asterisk isn't intended for remote command execution - it's just not it's purpose (it's a PBX not shell server). I suppose the code of handling ! is in client part of asterisk CLI, not server. There are other far much superior and faster ways how to do that. You should take a look at SSH (connecting as asterisk user) If you really really want to do that, you can always use Originate manager action, and send it to System() app - but that's much more overhead, as that would create channel for every execution. Regards, Atis -- Atis Lezdins VoIP Developer, IQ Labs Inc. [EMAIL PROTECTED] Skype: atis.lezdins Cell Phone: +371 28806004 Work phone: +1 800 7502835 ___ --Bandwidth and Colocation Provided by http://www.api-digital.com-- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
[asterisk-users] Manager API ! (System) command
I need to issue some system commands via the Asterisk manager API. From the CLI the ! (system command) works fine, but when connected via the manager API it fails. Does anyone know why, or of a work around? Thanks Robert___ --Bandwidth and Colocation Provided by http://www.api-digital.com-- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users